,i  #aai? ,,congress  #b;d ,session  ,h4
 ,r4 #ajfga  ,,9 ,,! ,,h\se ,,(         
,,repres5tatives  ,octob] #a1 #bjbf,mr4 
,got!im] 7= himself1 ,mr4 ,bacon1 ,mr4  
,nunn ( ,i[a1 ,ms4 ,s*olt51 & ,mr4      
,l&sman7 introduc$ ! foll[+ bill2 :i* 0 
ref]r$ to ! ,committee on ,homel&       
,security  ,a ,,bill  ,to am5d ! ,cyb]  
,incid5t ,report+ = ,critical           
,infra/ructure ,act ( #bjbb to          
reau?orize a program ( ! ,cyb]security &
 ,infra/ructure ,security ,ag5cy relat+ 
to security vuln]ability w>n+s1 & = o!r 
purposes4  #a4 ,%ort title  ,?is ,act   
may be cit$ z ! ,secur+ ,our ,critical  
,infra/ructure ,act4  #b4               
,reau?orization ( a program ( !         
,cyb]security & ,infra/ructure ,security
 ,ag5cy relat+ to security vuln]ability 
w>n+s ,section #aje ( ! ,cyb] ,incid5t  
,report+ = ,critical ,infra/ructure ,act
 ( #bjbb 7#f ,u4,s4,c4 #feb note7 is    
am5d$-- 7#a7 9 ! head+--  7,a7 by /rik+ 
,ransomw>e & ins]t+ ,security2 &  7,b7  
by /rik+ pilot2  7#b7 9 subsection 7a7--

 7,a7 by /rik+ ,n lat] ?an #a ye> aft] !
 date ( enactm5t ( ?is ,act1 ! ,director
 %all e/abli% a ransomw>e vuln]ability  
w>n+ pilot program & ins]t+ ,!re is     
e/abli%$ 9 ! ,cyb]security &            
,infra/ructure ,security ,ag5cy a       
security vuln]ability w>n+ program2 &   
7,b7 by /rik+ associat$ ) common        
ransomw>e attacks2  7#c7 by /rik+ pilot 
ea* place x appe>s2  7#d7 9 subsection  
7b77#a71 by /rik+ utiliz$ 9 ransomw>e   
attacks & mitigation te*niques & ins]t+ 
= in=mation sy/ems1 & mitigation        
te*niques relat+ !reto2  7#e7 9         
subsection 7d71 by /rik+ cov]$ entities 
& ins]t+ cov]$ utilities2  7#f7 9       
subsection 7e7-- 7,a7 by /rik+ ,no      
proc$ure & ins]t+ ! foll[+3  7#a7 ,9    
g5]al ,no proc$ure  2 &  7,b7 by add+ at
 ! end ! foll[+ new p>agraphs3  7#b7    
,exemption f disclosure ,in=mation %>$  
by a cov]$ entity ) respect to ! program
 e/abli%$ "u subsection 7a7 is exempt f 
disclosure "u section #eeb7;b77#c7 (    
title #e1 ,unit$ ,/ates ,code1 & any    

provision ( ,/ate1 local1 or ,tribal    
fre$om ( in=mation law1 op5 gov]nm5t    
law1 op5 meet+s law1 op5 records law1   
sun%9e law1 or simil> law requir+       
disclosure ( in=mation or records4  7#c7
 ,prohibit$ activity ,! ,director may n 
disclose1 reta91 or use in=mation %>$ by
 a cov]$ entity ) respect to ! program  
e/abli%$ "u subsection 7a7 unless su*   
disclosure1 ret5tion1 or use1 z ! case  
may be1 is = a purpose specifi$ 9       
subsection 7d77#e77;,a7 ( section #aje (
 ! ,cyb]security ,in=mation ,%>+ ,act ( 
#bjae 7#f ,u4,s4,c4 #aejd74  7#d7       
,privacy ,! ,director %all reta9        
in=mation %>$ by a cov]$ entity )       
respect to ! program e/abli%$ "u        
subsection 7a7 9 a mann] t protects f   
unau?oriz$ use or disclosure any ( !    
foll[+3 7,a7 ,any p]sonal in=mation t is
 ( a specific individual & includ$ 9 su*
 reta9$ in=mation4  7,b7 ,any in=mation 
t id5tifies a specific individual & is  
includ$ 9 su* reta9$ in=mation4  2 &    
7#g7 by /rik+ subsection 7g7 & ins]t+ ! 

foll[+ new subsections3  7g7 ,cyb]      
hygi5e s]vices  7#a7 ,automatic         
enrollm5t ,z "p ( ! program e/abli%$ "u 
subsection 7a71 ! ,director %all        
automatically enroll 9 ! applicable cyb]
 hygi5e s]vices ( ! ,cyb]security &     
,infra/ructure ,security ,ag5cy ea*     
cov]$ utility4  7#b7 ,dis5rollm5t ,a    
cov]$ utility enroll$ 9 a cyb] hygi5e   
s]vice pursuant to p>agraph 7#a7 may    
dis5roll f su* s]vice by submitt+ to !  
,director notice ( su* dis5rollm5t4  7h7
 ,incid5t response ,z "p ( ! program    
e/abli%$ "u subsection 7a71 if !        
,director det]m9es t a cov]$ utility has
 be5 affect$ by a cyb] incid5t1 !       
,director %all utilize ! incid5t        
response capabilities ( ! ,cyb]security 
& ,infra/ructure ,security ,ag5cy to    
c>ry out on behalf ( su* utility a      
response to su* incid5t1 z appropriate4 
7i7 ,coord9ation ,9 c>ry+ out ! program 
e/abli%$ "u subsection 7a71 ! ,director 
%all coord9ate ) ! ,adm9i/rator ( !     
,environm5tal ,protection ,ag5cy4  7j7  

,t]m9ation ,! program e/abli%$ "u       
subsection 7a7 %all t]m9ate on ! date t 
is five ye>s aft] ! date ( ! enactm5t ( 
?is subsection4  7k7 ,cov]$ utility     
def9$ ,9 ?is section1 ! t]m cov]$       
utility means an entity t is any ( !    
foll[+3  7#a7 ,a wat] or wa/ewat]       
utility t s]ves n m ?an #ajj1jjj        
individuals4  7#b7 ,an eligible entity  
7z su* t]m is def9$ 9 section #djabd ( !
 ,infra/ructure ,inve/m5t & ,jobs ,act  
7#db ,u4,s4,c4 #ahgbc774  7#c7 ,an      
op]ator ( any ( ! foll[+3 7,a7 ,a public
 wat] sy/em 7z su* t]m is def9$ 9       
section #adja ( ! ,safe ,dr9k+ ,wat]    
,act 7#db ,u4,s4,c4 #cjj;f774  7,b7     
,treatm5t works 7z su* t]m is def9$ 9   
section #bab ( ! ,f$]al ,wat] ,pollution
 ,control ,act 7#cc ,u4,s4,c4 #abib774  
4